Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/01d9fe-e14a-40a4-8458-26701b162fc3/1/pEGoyKkyL_yswV2yTe6-Nn5a4EE.roa
File: pEGoyKkyL_yswV2yTe6-Nn5a4EE.roa (raw, json)
Hash identifier: BRmqr+fKFFdKHRHLRNEIxp96b16KAoY3BPtxfqv5huI=
Subject key identifier: A4:41:A8:C8:A9:32:2F:FC:AC:C1:5D:B2:4D:EE:BE:36:7E:5A:E0:41
Certificate issuer: /CN=9af9d0d4befda09e999eabd0c8724e217364de10
Certificate serial: 01942747D71903888ADF14658F872F842392
Authority key identifier: 9A:F9:D0:D4:BE:FD:A0:9E:99:9E:AB:D0:C8:72:4E:21:73:64:DE:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/01d9fe-e14a-40a4-8458-26701b162fc3/1/pEGoyKkyL_yswV2yTe6-Nn5a4EE.roa
Signing time: Thu 02 Jan 2025 13:50:07 +0000
ROA not before: Thu 02 Jan 2025 13:50:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13238
IP address blocks: 100.43.64.0/19 maxlen: 19
199.21.96.0/22 maxlen: 22
199.36.240.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/01d9fe-e14a-40a4-8458-26701b162fc3/1/mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/01d9fe-e14a-40a4-8458-26701b162fc3/1/mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.mft
rsync://rpki.ripe.net/repository/DEFAULT/mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:d7:19:03:88:8a:df:14:65:8f:87:2f:84:23:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9af9d0d4befda09e999eabd0c8724e217364de10
Validity
Not Before: Jan 2 13:50:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a441a8c8a9322ffcacc15db24deebe367e5ae041
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ac:66:73:de:33:6e:2f:e0:b2:de:a9:5d:d0:
8e:64:a9:d1:28:41:58:03:4f:55:59:19:33:b1:86:
4f:2d:58:bd:2f:a4:2a:b2:5f:4f:ef:85:77:00:92:
db:cc:58:e9:84:1b:ba:cd:e1:88:18:88:c0:ef:8d:
10:ad:20:bc:8e:ad:33:40:36:01:64:8b:93:fa:fb:
73:ef:46:fa:00:d8:f5:a2:f6:6c:26:ac:19:cd:c4:
e2:98:30:d0:99:37:6c:da:e6:96:4c:e6:4e:d6:e3:
e4:b4:77:13:e2:32:6d:37:a8:d9:5d:d8:9e:91:1a:
b0:be:34:aa:62:2a:8a:f6:49:56:12:dd:f0:54:ac:
b9:cd:21:14:ce:05:ef:a0:ce:c2:24:49:e4:e4:b4:
06:6a:29:41:f5:a5:92:70:65:0a:98:cb:6f:87:f6:
ff:08:cf:5c:7a:8e:65:6c:bc:7f:c4:ad:02:db:dd:
6e:88:17:a7:f6:67:82:6c:b6:1e:5c:65:91:05:74:
47:80:9d:89:16:82:87:12:c0:ed:a4:3b:3e:72:c4:
cf:88:f9:6c:be:1f:ca:9f:7d:48:32:54:7b:f6:c7:
7e:b5:28:9b:7f:02:11:06:da:e6:73:22:5e:39:43:
ee:b4:b7:89:95:f0:1b:ea:89:fd:85:c0:45:22:2c:
11:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:41:A8:C8:A9:32:2F:FC:AC:C1:5D:B2:4D:EE:BE:36:7E:5A:E0:41
X509v3 Authority Key Identifier:
keyid:9A:F9:D0:D4:BE:FD:A0:9E:99:9E:AB:D0:C8:72:4E:21:73:64:DE:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/01d9fe-e14a-40a4-8458-26701b162fc3/1/pEGoyKkyL_yswV2yTe6-Nn5a4EE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/01d9fe-e14a-40a4-8458-26701b162fc3/1/mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
100.43.64.0/19
199.21.96.0/22
199.36.240.0/22
Signature Algorithm: sha256WithRSAEncryption
75:60:15:56:2f:4a:6a:2f:12:70:fe:e0:c2:9a:20:05:f2:64:
e2:86:58:25:83:8b:dc:02:ec:47:67:22:56:f8:f0:c3:5a:2b:
8d:06:10:08:fc:9b:f5:36:5e:fd:5f:f3:19:ea:83:21:a5:48:
48:2c:9b:79:3c:af:88:cc:c5:ba:bb:bd:ad:3a:56:0e:50:3c:
cb:66:57:f3:dd:f4:ec:53:ad:fb:cc:e2:dd:24:c4:5c:af:21:
9a:a3:4e:41:79:33:37:d0:6c:7a:9d:96:4e:99:01:85:f6:dc:
e0:8b:c7:20:35:f8:1e:cd:93:69:4d:2b:61:05:20:2d:8c:a3:
24:37:5b:33:35:3c:36:17:b5:a1:0a:ae:48:04:1e:d8:a9:a6:
6c:67:75:99:ab:c2:cf:46:ff:2a:01:75:2a:ca:99:f8:19:36:
c0:b5:ff:b9:b7:ad:9f:66:c2:af:ec:cc:e2:82:1c:82:18:22:
ce:6b:68:2a:78:49:74:fa:a9:cc:ae:c0:62:60:79:66:38:bf:
49:83:2a:56:99:18:7a:67:52:1d:f7:70:78:c5:71:10:93:be:
c0:72:d3:80:21:ed:0d:84:dc:93:d7:15:38:49:83:ad:8a:5f:
8d:6d:99:44:e1:0c:c8:a8:16:5e:51:9a:29:7e:81:4a:6f:68:
4e:e2:99:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:17:38 2025 by rpki-client